Senior Director, North America Information Security

Allied Universal; Irvine (CA); On-site; USD 125,000 - 175,000; Full time

Job summary

Allied Universal in Irvine, CA seeks a Senior Director to lead the North America Information Security program, reporting to the GCISO. The role translates risk into business terms, guides teams through incidents, and builds a culture of security ownership and accountability.

You will partner with regional leadership to ensure governance, risk management, and regulatory compliance across North America, protecting people, systems, and data.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of twelve years of progressive cybersecurity or information security experience.
• Minimum of five years of senior management or leadership within an information security function.
• Experience operating in global or highly distributed organizations with enterprise standards.
• Experience managing significant cybersecurity incidents and government-contracting obligations.
• Strong communication with executive leadership and collaboration across Legal, Technology, and Compliance.

Responsibilities

• Develop and execute a North America cybersecurity plan aligned with global priorities and regulatory requirements.
• Lead, mentor, and develop the North America information security team and governance.
• Oversee risk assessments, controls, and remediation, escalating to the GCISO as needed.
• Coordinate third‑party cybersecurity risk programs with Procurement, Legal, and business owners.

Skills

Budget management

Executive communication

Governance & risk

Security operations

NIST CSF

SOC 2

Incident response leadership

Global program management

Education

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field

Associate’s degree with 14+ years experience in cybersecurity

High school diploma with 17+ years experience in cybersecurity

Job description

Company Overview:

Allied Universal®, North America’s leading security and facility services company, offers rewarding careers that provide you a sense of purpose. While working in a dynamic, welcoming, and collaborative workplace, you will be part of a team that contributes to a culture that positively impacts the communities and customers we serve.

Allied Universal® is hiring a Senior Director, North America Information Security.The Senior Director, North America Information Security leads Allied Universal’s information security program across North America, serving as the senior most information security leader, reporting directly to the Global Chief Information Security Officer (GCISO).

This leader implements global security strategy protecting Allied Universal’s people, systems, data, and operations while meeting business, customer, government-contracting, and regulatory requirements. In partnership with the North America CIO and key functions, the Senior Director leads regional information security within the governance and direction set by the GCISO.

This strategic, hands‑on leader translates technical risk into business terms, guides teams through complex incidents, and builds a culture of security ownership and accountability.

This role will be based out of our Corporate Headquarters in Irvine, CA and can expect to travel within North America and internationally as business needs require.

RESPONSIBILITIES:

Regional Leadership and Strategy

• Develop and execute a North America cybersecurity plan aligned with global priorities, regional business objectives, and applicable legal, regulatory, contractual, and customer requirements
• Serve as senior cybersecurity advisor to North America executive leadership and represent the region in global cybersecurity governance forums
• Lead, mentor, and develop the North America information security team; recommend regional investments and resource priorities to the GCISO based on risk and business impact

Governance and Risk Management

• Implement and enforce global cybersecurity policies, standards, and controls across North America, adapting implementation methods to legitimate regional business and regulatory needs
• Maintain the North America risk register and lead recurring risk assessments; oversee remediation, escalation, risk acceptance, and closure, escalating risks beyond tolerance to the GCISO
• Monitor regional metrics, key risk indicators, and control performance; assess the cybersecurity implications of acquisitions, integrations, system implementations, and new customer engagements

Compliance, Audits, and Third-Party Risk

• Support compliance with applicable cybersecurity laws, regulations, and customer obligations, including SEC cybersecurity rules, U.S. state privacy and breach-notification laws, Canadian requirements, and government-contracting obligations
• Support alignment to NIST CSF, NIST SP 800-171, CMMC, ISO 27001, and SOC 2; coordinate regional audits, assessments, certifications, and penetration tests, and drive timely, sustainable remediation of findings
• Lead the North America third-party cybersecurity risk program with Procurement, Legal, Technology, and business owners across vendor selection, contracting, onboarding, monitoring, and termination

Incident Response and Resilience

• Serve as regional incident commander for significant cyber events, coordinating investigation, containment, remediation, and recovery with the GCISO and cross-functional stakeholders
• Escalate actual or suspected material incidents promptly; ensure evidence preservation and coordination with Legal on privilege, notification, and reporting obligations
• Maintain and test regional playbooks, tabletop exercises, and post‑incident reviews; ensure business‑continuity and disaster‑recovery plans address ransomware, destructive attacks, and critical vendor outages

Security Operations and Technology

• Partner with the North America CIO to embed security requirements into architecture, IT operations, infrastructure, application development, and project delivery
• Oversee regional design, architecture, deployment and effective use of approved cybersecurity technologies, and ensure regional assets are visible to global monitoring and vulnerability-management processes
• Oversee regional vulnerability prioritization, remediation, and exception management

Communication and Culture

• Brief the GCISO and North America executive leadership on cybersecurity posture, key risks, incidents, and remediation progress, translating technical issues into business, financial, operational, legal, and reputational impact
• Support GCISO reporting to the CEO, Global General Counsel and Board of Directors, and respond to customer, regulator, auditor, insurer, and lender inquiries
• Drive regional security awareness and training programs and a culture of cybersecurity accountability

QUALIFICATIONS (MUST HAVE):

• Must possess one of the following:
  • Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field
  • Associate’s degree in Computer Science, Information Technology, Cybersecurity, or a related field with a minimum of fourteen (14) years of experience in cybersecurity or information security
  • High school diploma or equivalent with a minimum of seventeen (17) years of experience in cybersecurity or information security
• Minimum of twelve (12) years of progressive experience in cybersecurity or information security, technology risk, or a closely related discipline
• Minimum of five (5) years of senior management or leadership experience within an information security function or a significant cybersecurity program
• Experience operating within a global or highly distributed organization and implementing enterprise standards in a regional environment
• Demonstrated experience managing and coordinating responses to significant cybersecurity incidents
• Experience with government-contracting cybersecurity obligations or other highly regulated customer environments.
• Experience building, managing, mentoring, and developing high‑performing cybersecurity teams
• Strong budget management and resource planning experience
• Proven ability to engage and communicate effectively with executive leadership on cybersecurity strategy and risk
• Strong written, oral, and interpersonal communication skills
• Strong knowledge of cybersecurity governance, risk management, security operations, vulnerability management, third‑party risk and regulatory compliance
• Expertise with risk‑based frameworks and standards such as NIST CSF, NIST SP 800‑171, CMMC, ISO 27001 and SOC 2
• Familiarity with North American cybersecurity and breach‑notification requirements, including U.S. federal and state requirements and relevant Canadian requirements
• Proven ability to advise senior executives and communicate complex cybersecurity issues in clear business terms
• Demonstrated ability to work effectively with Legal, Technology, Operations, Procurement, Compliance, and business teams
• Ability to operate as a “player‑coach,” setting strategic direction while engaging directly in complex operational, investigative, and incident‑response matters
• Sound judgment, integrity, discretion, and the ability to remain effective during high‑pressure events

PREFERRED QUALIFICATIONS (NICE TO HAVE):

• Recognized security certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), or equivalent
• Master’s degree in Computer Science, Information Technology, Cybersecurity, Business, Law, or a related field
• Experience with CMMC compliance programs
• Familiarity with government contracting cybersecurity requirements
• Experience supporting a public company or an organization preparing to become public
• Experience with mergers, acquisitions, integrations, or other significant business transformations
• Familiarity with cloud security, operational technology, product security, data protection, and modern software‑development practices
• Experience engaging with regulators, government customers, prime contractors, auditors, insurers, and external incident‑response specialists

COMPENSATION AND BENEFITS:

• Base salary range: $125,000 to $175,000 (based on experience), 20% bonus
• Medical, dental, vision, basic life, AD&D, retirement plan and disability insurance
• Eight paid holidays annually, five sick days, and four personal days
• Vacation time offered at an accrual rate of 3.08 hours biweekly. Unused vacation is only paid out where required by law.

PPO 14417

#LI-26

Allied Universal® is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race/ethnicity, age, color, religion, sex, sexual orientation, gender identity, national origin, genetic information, disability, protected veteran status or relationship/association with a protected veteran, or any other basis or characteristic protected by law. For more information: www.aus.com

If you have difficulty using the online system and require an alternate method to apply or require an accommodation, please contact our local Human Resources department. To find an office near you, please visit: www.aus.com/offices